Update: Ultimate Links PC Tips - Windows Malicious Files Start Up List

For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first.

An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.

Operating System Differences

A number of entries are repeated due to the way that different operating systems display startup items. For example, WinMe lists "POPROXY.EXE" as "Norton eMail Protect" in both MSCONFIG and the registry whereas WinXP lists it as "Poproxy" in MSCONFIG and "Noeton eMail Protect" in the registry.

To avoid the list becoming too large, all VIRUSES are shown using the registry version which is common to all Windows versions.

Alternatively use your browsers search facility - Ctrl+F for IE users.


"Y" - Normally leave to run at start-up

"N" - Not required - typically infrequently used tasks that can be started manually if necessary

"U" - User's choice - depends whether a user deems it necessary

"X" - Definitely not required - typically viruses, spyware, adware and "resource hogs"

"?" - Unknown

Use your browsers search facility - Ctrl+F for IE users.

Xw32w32.exeAdded by the SOKEVEN TROJAN!
XW32.ScranScran.exeAdded by the NARCS WORM!
Xw32alanismope.scrAdded by the SINALA WORM!
XW32Load[random filename].scrAdded by the CASPID WORM!
Xw32supw32sup.exeAdult content dialler
XW32TcWTC32.scrAdded by the VOTE.D or VOTE.K WORMS!
XW3KNetworkrundll32.exe w3knet.dll, dllinitrunAdvertising spyware. Check here for more info on this particular one
YW75P2PSERVERW75P2PS.EXEPrinter utility which is required in order to make the printer work correctly

View Original Content...